Tliis listing of claims will replace all prior versions, and listings, of claims in the present 
application. 



LISTING OF CLAIMS: 

Claim 1 . (Currently Amended) A method for providing cryptographic keys usable in a network 
of connected computer nodes applying a signature scheme, the method executable by a first 
computer node comprising the steps of: 
generating a random secret key; 

generating an exponent interval / having a plurality of exponent elements, said exponent 
interval having a specified first random limit, wherei ny - with - a - probabilit y- Gle se- te - e e Ft a int - ^ each 
element of said plurality of exponent elements of the exponent interval having has a unique 
prime factor that is larger than a given security parameter; and 

providin g, at said first computer node^ a public key comprising an exponent-interval 
description including said first random limit, and an interval width specification and a public key 
value derived from the random secret key, said public key value including a random prime value, 
a number (n) corresponding to a product of two large prime numbers forming said random secret 
key, said exponent interval, and two public values fi-om a set of elements having a square root 
modulo n, such that the random secret key and a selected exponent value firom the plurality of 
exponent elements in said exponent interval / are usable for deriving a signature value on a 
message to be sent within the network to a second computer node for verification , wherein said 
deriving includes: computing an e-th root of a value derived firom the message and the secret key 
using a cryptographic hash function, the e being an exponent value from exponent interval 7. and 
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receiving, at said second computer node, said signature value and said public key value, 
wherein verification of said signature value at said second computer node, includes raising said 
computed signature root value that forms part of said signature value to the power of the 
exponent value e. and, from said provided public key value, confirming that said exponent value 
e is contained in an exponent interval /having said plurality of exponent elements . 

Claim 2. (Original) The method according to claim 1, wherein the step of generating a random 
secret key comprises using two primes, the product of which is part of tlie public key. 

Claim 3. (Original) The method according to claim 1, wherein the step of generating a random 
secret key comprises selecting an integer value defining a class group and selecting two elements 
of the class group. 

Claim 4. (Original) The method according to claim 3, wherein the step of providing a public key 
comprises computing a modified public key value under use of the selected two elements and the 
exponent interval. 

Claim 5. - 6. (Canceled) 

Claim 7. (Currently Amended) A method for verifying a signature value on a message in a 
network of connected computer nodes, the method executable by a second computer node 
comprising the steps of: 
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receiving the signature value from a first computer node; 

providing, at the second computer node, a public key comprising: an exponent-interval 
description having a specified first random limit and an interval vridth specification and, a public 
key value derived fi-om the random secret key, said public key value including a random prime 
value, a number (n) corresponding to a product of two large prime numbers forming said secret 
key, an exponent interval / having a plurality of exponent elements, and two public values iiom a 
set of elements having a square root modulo n. said signature value being derived firom said 
random secret key and a selected exponent value from the plurality of exponent elements in said 
exponent interval / on a message to be sent within the network to a second computer node for 
verification, said deriving including: computing an e-th root of a value derived from the message 
and the secret key using a cryptographic hash function, the e being an exponent value from 
exponent interval /: and 



verifying, at said second computer node, u sing said provided public key value, whether 
an exponent value is contained in an exponent interval /having [[a]] said plurality of exponent 
elements, wherein each element of said plurality of exponent elements of the exponent interval 
has , with a probability cIogb to csrtointy, a unique prime factor that is larger than a given security 
parameter, the signature value being invalid if the exponent value is not contained in the 
exponent interval , and, the verifying of said signature value at said second computer node further 
comprises: receiving, at said second computer node, said signature value and said public key 
value, and raising said computed signature root value that forms part of said signature value to 
the power of the exponent value e . 
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Claim 8. -13 (Canceled) 



Claim 14. (Currently Amended) A program storage device readable by machine, tangibly 
embodying a program of instructions executable by tlie machine to perfonn method steps for 
providing cryptographic keys usable in a network of connected computer nodes applying a 
signature scheme, said method steps comprising the steps of: 
generating a random secret key; 

generating an exponent interval / having a plurality of exponent elements, said exponent 
interval having a specified first random limit, wherein , with a probability clos e to c e rtaint}^ each 
element of said plurality of exponent elements of the exponent interval/has a unique prime 
factor that is larger than a given security parameter; and 

providin g, at said first computer node, a public key comprising: an exponent-interval 
description having said specified first random Hmit and an interval width specification, and a 
public key value derived fi'om the random secret key, said public key value including a random 
prime value, a number (n) corresponding to a product of two large prime numbers forming said 
random secret key, said exponent interval /, and two public values fi:om a set of elements having 
a square root modulo n, such that the random secret key and a selected exponent value firom the 
exponent interval are usable for deriving a signature value on a message to be sent within the 
network to a second computer node for verificatio n, wherein said deriving includes: computing 
an e-th root of a value derived fi:om the message and the secret key using a crypto grapliic hash 
function, the e being an exponent value firom exponent interval / . and 
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receiving, at said second computer node, said signature value and said public key value, 
wherein verification of said signature value at said second computer node, includes raising said 
computed signature root value that forms part of said signature value to the povyer of the 
exponent value g. and, from said provided public key value, and confirming that said exponent 
value e is contained in an exponent interval / having said pluraUtv of exponent elements . 

raising said computed signature root value to the power of the exponent value, and, from 
a provided public key value, whether said exponent value e is contained in an exponent interval / 
having said plurality of exponent elements . 

Claim 15.-17 (Canceled) 

Claim IS. (Currently Amended) A program storage device readable by machine, tangibly 
embodying a program of instructions executable by the machine to perform method steps for 
providing a signature value on a message in a network of cormected computer nodes, said 
method steps comprising the steps of: 

receiving the signature value from a first computer node, 

pro\iding, at said second computer node, a public key comprising; an exponent-interval 
description having a specified first random limit and an interval width specification and, a public 
key value derived from a random secret key, said public key value including a random prime 
value, a number (n) corresponding to a product of two large prime numbers forming said secret 
key, an exponent interval / having a plurality of exponent elements, and two public values from a 
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set of elements having a square root modulo n. said si | gnature value being derived from said 
random secret key and a selected exponent value from the plurality of exponent elements in said 
exponent interval / on a message to be sent within the network to a second computer node for 
verification, said deriving including: computing an e-th root of a value derived from the message 
and the secret key using a cryptographic hash function, the e being an exponent value from 
exponent interval / : and 

veri^ng, at said second computer node, u sing said provided public key value, whether 
an exponent value is contained in an exponent interval / having a plurality of exponent elements, 
wherein each element of the exponent interval has , with a probability clos e to c e rtainty, a unique 
prime factor tliat is larger than a given security parameter, the signature value being invalid if the 
exponent value is not contained in the exponent interval , and, the verifying of said signature 
value at said second computer node fiirther comprises: receiving, at said second computer node, 
said signature value and said provided public key value, and raising said computed signature root 
value that forms part of said signature value to the power of the exponent value e . 

Claim 19-21 (Canceled) 
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